The Little Program that Cried Wolf
James Hill · Purdue e-Pubs (Purdue University System) · 2016
Software developers are expected to produce high quality, secure source code while dealing with both external and internal forces that can negatively impact these traits. To ensure source code is of high quality and secure, and to help mitigate the forces, software developers have tools designed to identify potential problems in the source code that will compromise both quality and security. This, however, raises a question, “What do software developers do when the tools design to ensure quality and security can no longer be trusted?” This talk will discuss the challenges software developers face in ensure secure code, the challenges tools faces in evaluating quality to ensure secure coding, and approaches we are taking to address this problem in the software community.